Java Servlet Login

Develop a set of Java servlets that allows a user to login using a (hard-coded) user name and password. Use servlet session to maintain login status. When user is logged in allow him to select and download one of two "secret" documents (which are available only if user is logged in). The secret documents must only be available if the user gives the correct user name and password. No credit if the user can bypass this password system just by knowing the "secret" URL of the document.